conntrack-tools[]: can't get kernel conntrack table

[Raphaël Berlamont]

Hello list,

I can't make conntrack-tool work on my system.
Tried with vanilla kernels 2.6.39.4, 3.0.99, 3.6.11.

I compiled/install those tools/libs :
- libnetfilter_queue/libnetfilter_queue-1.0.2
- libnfnetlink/libnfnetlink-1.0.1
- libmnl-1.0.3
- libnetfilter_cttimeout-1.0.0
- libnetfilter_cthelper-1.0.0
- libnetfilter_conntrack-1.0.4
- conntrack-tools-1.4.2

My kernel config is available here :
http://pastebin.com/8tjVuRVT

My conntrackd config :
http://pastebin.com/wLZF3TZ9

When I launch conntrackd, I have the following message in the log :
-----
[Mon Oct 13 16:49:20 2014] (pid=3D5388) [ERROR] can't get kernel conntr=
ack table
-----

I don't know what to do now=E2=80=A6 I tried to read the sources, but I=
'm not
fluent with C, at-all.

As you'll see in the kernel configuration, allmost all *CONN* options
were enabled.

Any idea ? Anyone ?
--=20
Rapha=C3=ABl Berlamont
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to ***@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

[Pablo Neira Ayuso]

Post by Raphaël Berlamont
Hello list,
=20
I can't make conntrack-tool work on my system.
Tried with vanilla kernels 2.6.39.4, 3.0.99, 3.6.11.
=20
- libnetfilter_queue/libnetfilter_queue-1.0.2
- libnfnetlink/libnfnetlink-1.0.1
- libmnl-1.0.3
- libnetfilter_cttimeout-1.0.0
- libnetfilter_cthelper-1.0.0
- libnetfilter_conntrack-1.0.4
- conntrack-tools-1.4.2
=20
http://pastebin.com/8tjVuRVT
=20
http://pastebin.com/wLZF3TZ9
=20
-----
[Mon Oct 13 16:49:20 2014] (pid=3D5388) [ERROR] can't get kernel conn=

track table

# CONFIG_NF_CT_NETLINK is not set

http://conntrack-tools.netfilter.org/manual.html#requirements

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to ***@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

[Raphaël Berlamont]

Yes ! Thank you very much=E2=80=A6
--=20
Raph
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to ***@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html